[dns-operations] DNSViz - technical difficulties

[Viktor Dukhovni]

On Wed, Apr 17, 2019 at 07:31:08AM -0700, Casey Deccio wrote:

> I see.  As it turns out, this is a feature that is available in the
> command-line version, but not (yet) in the online version.  See here:
> 
> https://github.com/dnsviz/dnsviz/blob/master/README.md#pre-deployment-dns-testing

Much grattitude for DNSViz as always.  As to the current "master"
branch, I am running into loops in "dnsviz graph -Thtml", currently
for 4 domains:

    _25._tcp.anadoil.com.
    _25._tcp.festinareality.cz.
    _25._tcp.daivonex.org.
    _25._tcp.rencontres.vip.

The loop is in:

  ... the four calls below repeat "forever" running out of stack ...

  File "dnsviz/response.py", line 1065, in create_or_update_rrsig_info
    self.set_wildcard_info(rrsig, server, client, response, rdclass, is_referral)
  File "dnsviz/response.py", line 1086, in set_wildcard_info
    self.wildcard_info[wildcard_name].create_or_update_nsec_info(server, client, response, rdclass, is_referral)
  File "dnsviz/response.py", line 1201, in create_or_update_nsec_info
    nsec_set_info.rrsets[name].update_rrsig_info(server, client, response, response.message.authority, rdclass, is_referral)
  File "dnsviz/response.py", line 1052, in update_rrsig_info
    self.create_or_update_rrsig_info(rrsig, rrsig_rrset.ttl, server, client, response, rdclass, is_referral)

  File "dnsviz/response.py", line 1065, in create_or_update_rrsig_info
    self.set_wildcard_info(rrsig, server, client, response, rdclass, is_referral)
  File "dnsviz/response.py", line 1086, in set_wildcard_info
    self.wildcard_info[wildcard_name].create_or_update_nsec_info(server, client, response, rdclass, is_referral)
  File "dnsviz/response.py", line 1201, in create_or_update_nsec_info
    nsec_set_info.rrsets[name].update_rrsig_info(server, client, response, response.message.authority, rdclass, is_referral)
  File "dnsviz/response.py", line 1052, in update_rrsig_info
    self.create_or_update_rrsig_info(rrsig, rrsig_rrset.ttl, server, client, response, rdclass, is_referral)

  File "dnsviz/response.py", line 1061, in create_or_update_rrsig_info
    rrsig_info = self.get_rrsig_info(rrsig)
  File "dnsviz/response.py", line 1046, in get_rrsig_info
    return self.rrsig_info[rrsig]
  File "/usr/local/lib/python3.6/site-packages/dns/rdata.py", line 252, in __hash__
    return hash(self.to_digestable(dns.name.root))
  File "/usr/local/lib/python3.6/site-packages/dns/rdata.py", line 174, in to_digestable
    self.to_wire(f, None, origin)
  File "/usr/local/lib/python3.6/site-packages/dns/rdtypes/ANY/RRSIG.py", line 137, in to_wire
    self.signer.to_wire(file, None, origin)
  File "/usr/local/lib/python3.6/site-packages/dns/name.py", line 612, in to_wire
    n = Name(labels[i:])

The smallest of the "probe.json" files (compressed) attached for
anyone who's curious and is willing to check whether their deployment
runs into the same symptoms.

-- 
	Viktor.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: probe._25._tcp.daivonex.org.json.gz
Type: application/gzip
Size: 21249 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20190417/5b778982/attachment.gz>